v2604.rc2

Elements Project/Core Lightning

39c243ce View source ↗

Public commit record

What the developer wrote

Authored by Sangbida Chaudhuri

0/100 · Opaque

v2604.rc2

Changelog-None

! Very short subject! Too few words to establish purpose! No meaningful explanatory body

The short version

What changed, and why it matters

This commit is a routine version bump from v26.04rc1 to v26.04rc2 for Core Lightning. It only updates version strings in packaging files and refreshes the changelog. No code behavior changes are included in the diff itself, so this single commit does not introduce or fix any security issue.

Recommended action

No security action required for this commit. Review the actual pull requests referenced in the changelog (e.g., #8983, #8974, #8864, #8997) if assessing the security relevance of the release candidate changes.

Security signals we found

No strong security signals were identified.

Technical analysis

Evidence from the diff

The diff is a release-candidate version bump: .version, CHANGELOG.md, Python package init.py and pyproject.toml files, tools/reckless, and uv.lock are updated from v26.04rc1 to v26.04rc2. The CHANGELOG additions describe other merged fixes and features, but those code changes are not present in this commit. There are no functional code modifications here.

Changed components

release metadataversion stringsCHANGELOG.md

Inspect captured patch +31 / −17

diff --git a/.version b/.version
index 7a040422..a4eb3bf1 100644
--- a/.version
+++ b/.version
@@ -1 +1 @@
-v26.04rc1
+v26.04rc2
diff --git a/CHANGELOG.md b/CHANGELOG.md
index c413d26d..aa544b46 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,7 +4,7 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 
-## [26.04rc1] - 2026-03-23: TBD
+## [26.04rc2] - 2026-04-02: TBD
 
 This release is named by TBD.
 
@@ -17,8 +17,8 @@ This release is named by TBD.
  - New command `spliceout` for easily splicing out of channels ([#8857])
  - New command `splicein` allows for convenient splicing funds into a channel ([#8856])
  - Added support for multi (ie 3+) channel splices, dynamic wallet funding, and dynamic fee calculating. ([#8450])
- - Plugins: new `currencyrate` plugin to provide `currencyconvert` API ([#8842])
- - `listpeerchannels` now accepts a `channel_id` filter ([#8766])
+ - new plugin currencyrate to provide `currencyconvert` API ([#8842])
+ - `listpeerchannels` now accepts a `channel_id` filter, ([#8766])
  - JSON-RPC: `offer` now has a `fronting_nodes` option to specify neighbors for payer to use to fetch invoices and make payments. ([#8490])
  - Config: `payment-fronting-node` option to specify neighbor node(s) to use for all bolt11 invoices, bolt12 offers, invoices and invoice_requests. ([#8490])
  - libplugin: support for options which accumulate if specified more than once ("multi": true). ([#8490])
@@ -35,7 +35,12 @@ This release is named by TBD.
 
 ### Changed
 
- - Plugins: `forward_event` notification now has `preimage` set if status is settled. ([#8943])
+ - cln-rpc and cln-grpc now expose notification bindings for balance_snapshot, coin_movement, deprecated_oneshot, disconnect, forward_event, invoice_creation, invoice_payment, log, onionmessage_forward_fail, openchannel_peer_sigs, plugin_started, plugin_stopped, sendpay_failure, sendpay_success, shutdown, and warning. ([#8938])
+ - cln-rpc and cln-grpc now expose xpay notification bindings for `pay_part_start` and `pay_part_end`. ([#8938])
+ - lightningd: we don't allow new incoming channels if we cannot estimate fees (rather than assuming minfee). ([#8864])
+ - Plugins: `sql` plugin tables "htlcs", "forwards", "invoices", "sendpays" and "networkevents" are now updated more efficiently. ([#8914])
+ - uniform message padding is now opt-in via the --dev-uniform-padding flag. ([#8997])
+ - forward_event notification now has preimage set if status is settled. ([#8943])
  - Plugins: `askrene` now runs routing in parallel. ([#8723])
  - bcli plugin now uses synchronous execution, simplifying bitcoin backend communication and improving error handling reliability. ([#8820])
  - `gossipd` no longer compacts gossip_store on startup (improving start times significantly). ([#8903])
@@ -63,8 +68,10 @@ Note: You should always set `allow-deprecated-apis=false` to test for changes.
 
 ### Fixed
 
+ - connectd: throttle incoming peers to give fairer peer handling under stress. ([#8983])
+ - lightningd no longer crashes when replaying stored blinded HTLCs during startup. ([#8974])
  - lightningd: unreserve UTXOs from withheld funding PSBT ([#8943])
- - lightningd: withheld channel now fails back incoming inflight HTLC ([#8943])
+ - withheld channel now fails back incoming inflight HTLC ([#8943])
  - JSON-RPC: reckless command no longer hangs if reckless executable is not found in PATH. ([#8894])
  - lightning-cli: fix invalid json requests when input includes a numeric string with leading zeroes ([#8934])
  - xpay: handle payment redirected from "pay" even if we don't recognize some arguments. ([#8939])
@@ -94,6 +101,7 @@ Note: You should always set `allow-deprecated-apis=false` to test for changes.
 
 ### EXPERIMENTAL
 
+ - fixed crash with dual funding if we cannot estimate fees. ([#8864])
  - Protocol: avoid an occasional hang when splicing with a pending closing HTLC. ([#8911])
 
 
@@ -132,6 +140,7 @@ Note: You should always set `allow-deprecated-apis=false` to test for changes.
 [#8850]: https://github.com/ElementsProject/lightning/pull/8850
 [#8856]: https://github.com/ElementsProject/lightning/pull/8856
 [#8857]: https://github.com/ElementsProject/lightning/pull/8857
+[#8864]: https://github.com/ElementsProject/lightning/pull/8864
 [#8866]: https://github.com/ElementsProject/lightning/pull/8866
 [#8889]: https://github.com/ElementsProject/lightning/pull/8889
 [#8890]: https://github.com/ElementsProject/lightning/pull/8890
@@ -139,11 +148,16 @@ Note: You should always set `allow-deprecated-apis=false` to test for changes.
 [#8894]: https://github.com/ElementsProject/lightning/pull/8894
 [#8903]: https://github.com/ElementsProject/lightning/pull/8903
 [#8911]: https://github.com/ElementsProject/lightning/pull/8911
+[#8914]: https://github.com/ElementsProject/lightning/pull/8914
 [#8934]: https://github.com/ElementsProject/lightning/pull/8934
 [#8937]: https://github.com/ElementsProject/lightning/pull/8937
+[#8938]: https://github.com/ElementsProject/lightning/pull/8938
 [#8939]: https://github.com/ElementsProject/lightning/pull/8939
 [#8943]: https://github.com/ElementsProject/lightning/pull/8943
-[v26.04rc1]: https://github.com/ElementsProject/lightning/releases/tag/v26.04rc1
+[#8974]: https://github.com/ElementsProject/lightning/pull/8974
+[#8983]: https://github.com/ElementsProject/lightning/pull/8983
+[#8997]: https://github.com/ElementsProject/lightning/pull/8997
+[v26.04rc2]: https://github.com/ElementsProject/lightning/releases/tag/v26.04rc2
 
 
 ## [25.12] - 2025-12-04: "Boltz's Seamless Upgrade Experience"
diff --git a/contrib/pyln-client/pyln/client/__init__.py b/contrib/pyln-client/pyln/client/__init__.py
index b9508a3d..7773c379 100644
--- a/contrib/pyln-client/pyln/client/__init__.py
+++ b/contrib/pyln-client/pyln/client/__init__.py
@@ -4,7 +4,7 @@ from .gossmap import Gossmap, GossmapNode, GossmapChannel, GossmapHalfchannel, G
 from .gossmapstats import GossmapStats
 from .version import NodeVersion
 
-__version__ = "v26.04rc1"
+__version__ = "v26.04rc2"
 
 __all__ = [
     "LightningRpc",
diff --git a/contrib/pyln-client/pyproject.toml b/contrib/pyln-client/pyproject.toml
index 7ec3b7c2..9899b125 100644
--- a/contrib/pyln-client/pyproject.toml
+++ b/contrib/pyln-client/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "pyln-client"
-version = "v26.04rc1"
+version = "v26.04rc2"
 description = "Client library and plugin library for Core Lightning"
 authors = [{ name = "Christian Decker", email = "decker.christian@gmail.com" }]
 license = { text = "BSD-MIT" }
diff --git a/contrib/pyln-proto/pyln/proto/__init__.py b/contrib/pyln-proto/pyln/proto/__init__.py
index c3becb9b..d47485a0 100644
--- a/contrib/pyln-proto/pyln/proto/__init__.py
+++ b/contrib/pyln-proto/pyln/proto/__init__.py
@@ -4,7 +4,7 @@ from .invoice import Invoice
 from .onion import OnionPayload, TlvPayload, LegacyOnionPayload
 from .wire import LightningConnection, LightningServerSocket
 
-__version__ = "v26.04rc1"
+__version__ = "v26.04rc2"
 
 __all__ = [
     "Invoice",
diff --git a/contrib/pyln-proto/pyproject.toml b/contrib/pyln-proto/pyproject.toml
index 24caebd7..d5f1e912 100644
--- a/contrib/pyln-proto/pyproject.toml
+++ b/contrib/pyln-proto/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "pyln-proto"
-version = "v26.04rc1"
+version = "v26.04rc2"
 description = "This package implements some of the Lightning Network protocol in pure python. It is intended for protocol testing and some minor tooling only. It is not deemed secure enough to handle any amount of real funds (you have been warned!)."
 authors = [
     {name = "Christian Decker", email = "decker.christian@gmail.com"}
diff --git a/contrib/pyln-testing/pyln/testing/__init__.py b/contrib/pyln-testing/pyln/testing/__init__.py
index 66ae3385..fdb19016 100644
--- a/contrib/pyln-testing/pyln/testing/__init__.py
+++ b/contrib/pyln-testing/pyln/testing/__init__.py
@@ -1,4 +1,4 @@
-__version__ = "v26.04rc1"
+__version__ = "v26.04rc2"
 
 __all__ = [
     "__version__",
diff --git a/contrib/pyln-testing/pyproject.toml b/contrib/pyln-testing/pyproject.toml
index cfced70d..aced7139 100644
--- a/contrib/pyln-testing/pyproject.toml
+++ b/contrib/pyln-testing/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "pyln-testing"
-version = "v26.04rc1"
+version = "v26.04rc2"
 description = "Test your Core Lightning integration, plugins or whatever you want"
 authors = [{ name = "Christian Decker", email = "decker.christian@gmail.com" }]
 license = { text = "BSD-MIT" }
diff --git a/tools/reckless b/tools/reckless
index 225e55b8..8d7440b7 100755
--- a/tools/reckless
+++ b/tools/reckless
@@ -21,7 +21,7 @@ from urllib.error import HTTPError
 import venv
 
 
-__VERSION__ = 'v26.04rc1'
+__VERSION__ = 'v26.04rc2'
 
 logging.basicConfig(
     level=logging.INFO,
diff --git a/uv.lock b/uv.lock
index 629675e7..2b2c3a03 100644
--- a/uv.lock
+++ b/uv.lock
@@ -1621,7 +1621,7 @@ dev = [{ name = "pyln-proto", editable = "contrib/pyln-proto" }]
 
 [[package]]
 name = "pyln-client"
-version = "26.4rc1"
+version = "26.4rc2"
 source = { editable = "contrib/pyln-client" }
 dependencies = [
     { name = "pyln-bolt7" },
@@ -1680,7 +1680,7 @@ dev = [
 
 [[package]]
 name = "pyln-proto"
-version = "26.4rc1"
+version = "26.4rc2"
 source = { editable = "contrib/pyln-proto" }
 dependencies = [
     { name = "base58" },
@@ -1710,7 +1710,7 @@ dev = [{ name = "pytest", specifier = ">=8.0.0" }]
 
 [[package]]
 name = "pyln-testing"
-version = "26.4rc1"
+version = "26.4rc2"
 source = { editable = "contrib/pyln-testing" }
 dependencies = [
     { name = "cheroot" },

Risk score

Why this scored 15/100

Our methodology →

Potential impact 0/30

Exploitability 0/25

Stealth signal 0/15

Affected reach 0/15

Confidence 10/10

Evidence quality 5/5

Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.

What the developer wrote

What changed, and why it matters

Security signals we found

Evidence from the diff

Changed components

Why this scored 15/100

Community notes

Related watches

Revert "doc: require Homebrew GNU make and gpatch on macOS"

Revert "tests: drop obsolete x-prefix in compacter-slow.sh"

doc: require Homebrew GNU make and gpatch on macOS